Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_DDDX_K8RYxhyh5ilwgQdfo_xjw.roa
File: _DDDX_K8RYxhyh5ilwgQdfo_xjw.roa (raw, json)
Hash identifier: nd6yZ9ZXjyXLZ5hbz6WD+7cfMe/1DrbmDe2qdQNxjlA=
Subject key identifier: FC:30:C3:5F:F2:BC:45:8C:61:CA:1E:62:97:08:10:75:FA:3F:C6:3C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01862B3AA8FC22F23DE578D45101D87B81AA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_DDDX_K8RYxhyh5ilwgQdfo_xjw.roa
Signing time: Tue 07 Feb 2023 09:35:09 +0000
ROA not before: Tue 07 Feb 2023 09:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51102
IP address blocks: 77.81.48.0/24 maxlen: 24
93.114.176.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:3a:a8:fc:22:f2:3d:e5:78:d4:51:01:d8:7b:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 7 09:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc30c35ff2bc458c61ca1e6297081075fa3fc63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:08:06:82:27:0f:1e:9b:db:d2:aa:a0:2f:
2c:fb:61:6a:e6:72:ab:29:9b:d2:2c:7d:a5:29:57:
41:00:4f:4b:5e:1b:ab:90:49:82:d4:ff:d0:59:b9:
4c:5d:79:49:86:8c:98:7b:86:8f:e9:c8:4f:91:c9:
af:c1:b3:a5:97:e7:a5:26:ae:eb:ca:1f:0d:6d:e9:
16:b9:7f:81:73:73:44:2b:52:e2:57:80:ff:ce:dc:
67:05:f9:ec:2a:d4:09:6c:8c:e0:b9:ba:91:54:31:
8a:31:c4:ed:87:85:e2:73:b9:09:59:8d:52:f9:53:
8e:52:8b:1f:bb:b0:b1:1e:b1:46:79:43:78:fe:ac:
c4:65:18:9f:3b:2e:7e:27:53:7f:4b:f8:8d:55:a2:
67:bd:d5:e3:3e:a0:99:34:9a:e5:dd:8b:a2:32:8c:
15:2f:7b:81:dd:7f:45:65:c8:43:c2:38:da:96:e7:
44:14:31:91:da:a6:d9:9e:cf:eb:a5:bb:be:38:c3:
34:b4:b9:c6:80:8a:fc:39:4f:4d:31:16:56:9a:37:
cb:85:16:fb:06:9f:0e:cb:44:19:8a:69:52:e8:1d:
0b:37:f9:f2:19:09:9d:ae:7f:1b:8c:86:59:3d:c0:
d4:de:6a:0c:86:1e:cf:aa:73:19:3f:de:34:c4:9d:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:C3:5F:F2:BC:45:8C:61:CA:1E:62:97:08:10:75:FA:3F:C6:3C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_DDDX_K8RYxhyh5ilwgQdfo_xjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.48.0/24
93.114.176.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:a5:39:7e:bc:5d:24:2a:d8:47:28:97:ce:31:76:14:b7:a3:
31:91:d8:33:5c:3c:f2:b0:e4:34:d6:66:03:ea:c3:23:38:04:
64:5b:42:48:2a:fc:07:1e:7c:a0:5b:d2:a9:e9:5f:6d:1b:3f:
04:50:45:d6:22:78:06:2c:a4:1a:93:5a:a1:d3:40:26:87:f3:
fb:ca:48:f7:d2:10:93:39:ea:96:a1:ab:34:32:7a:6f:39:40:
74:5f:d0:f8:91:da:50:31:f4:24:98:9b:69:ee:69:bd:03:13:
53:9a:89:8a:8d:1b:0f:8e:42:9a:74:eb:cf:40:64:51:ca:6a:
ae:c9:08:15:e8:70:b4:29:d2:50:eb:e8:64:9a:74:c7:83:c5:
d4:75:05:d6:f5:b1:81:12:d3:47:d5:94:a4:b6:a8:64:14:dd:
4b:0c:d5:00:d7:42:ac:6b:30:16:2b:c2:31:57:bf:45:bb:30:
01:ab:c0:55:03:8f:79:6e:42:80:75:55:bd:2f:d6:5d:fe:57:
a6:dc:43:37:67:3d:31:14:63:d0:12:44:65:b0:34:e1:f5:67:
1f:6f:e0:ea:66:c3:41:ce:23:0e:de:f6:0b:56:ae:aa:fd:9f:
11:59:05:e4:05:eb:46:d9:71:2f:2d:f1:b6:c7:93:eb:6c:95:
ef:e6:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org